One finding from a rule check. rule_id — stable handle from spec §3.7 (e.g., "A1", "B7", "F2"). message — human-readable finding; should na

Raised when the JSONL stream or verdict text cannot be parsed.

Backs up a file's bytes; restores on context exit.

Backs up a file's bytes; restores on context exit.

Production lookup-by-(doi-with-cross-check-then-title) client for Crossref. Concurrency note: rate-limit pacing is per-instance.

Production lookup-by-(arxiv-id-with-cross-check-then-title) client. Concurrency note: rate-limit pacing is per-instance.

Production lookup-by-(doi-with-cross-check-then-title) client. Concurrency note: rate-limit pacing is per-instance. Share a single instance a

Minimal in-memory stand-in for VerificationCache. Records get/put calls so tests can assert hit/skip behavior without SQLite.

Backs up a file's bytes; restores on context exit (exception-safe).

Raised on any document the parser refuses to classify (§3.1). ``kind`` is a stable machine-readable failure class; ``line_no`` is 1-based; ``

Raised when validate_gold_set rejects a tuple at ingestion time. The diagnostic always names the rule that failed (a / b / c / d per spec §7.

Raised by `_invoke_judge` when judge_fn fails or returns malformed output. Carries the INV-14 fault-class tag + detail so the caller can emit a

SQLite-backed (citation_key, resolver_name, query_form) → response cache. Single-process use. Each method opens a short-lived connection so the

Crossref API degraded -- caller MUST omit `crossref_unmatched`.

Whole-disclosure decision returned by `decide_disclosure_output`.

OpenAlex API degraded — caller MUST omit `openalex_unmatched`.

Raised by `_invoke_retrieve` when retrieve_fn fails or returns malformed output. Mirrors JudgeInvocationError but tags faults with the INV-14 ret

SS API degraded (network failure / rate limit exhausted / 5xx). Per spec §3.2 emission rules, this triggers OMIT of the `semantic_scholar_unm

arXiv API degraded -- caller MUST omit `arxiv_unmatched`.

Phase 1 rejection carrying the structured failure list.

Bundle of artifacts a check might want to read. Members are Optional because some modes don't need every artifact (e.g., jsonl-stream mode on

Raised when SKILL.md frontmatter cannot be parsed. Distinct from a missing fence (returns None) and an empty fence (returns {}). Callers shou

The passport YAML is structurally unusable (not a mapping, or `terminal_policies` is a non-mapping value). Per codex Q3: surface a clear error

Production lookup-by-(doi-then-title) client for v3.7.3 backfill. Satisfies `contamination_signals.SemanticScholarClient` Protocol. Tests inj

An IMPLEMENTED task (one with a native measurer) failed to run. Raised — never downgraded to ``pending`` — when a task that the harness knows

G3/G10 invariant: a still-UNCERTAIN category must not be rendered as though USED in any anchor output.

One §3.1 block: marker (optional) + content lines, with char spans.

Category state outside {USED, NOT USED, UNCERTAIN}.

policy_anchor outside CANONICAL_ANCHORS (closed enum).

G8 invariant: IEEE render emits level_of_involvement and affected_sections together, or neither — emitting one without the other is non-confor

Structured parse of a single <!--ref:...--> marker.

Neither venue nor policy_anchor supplied — disclosure mode requires one selector. Default to None on both fields so a bare RendererInput() doe

Unacknowledged structural-shape flags (§3.3 / §3.6).

G2 invariant: --policy-anchor=prisma-trAIce requires slr_lineage=true or mode=<slr> input.

§4.4 #7: --venue and --policy-anchor that map to incompatible placement / phrasing requirements must be rejected with explicit error; silent p

Structured return from extract_authors — avoids leaking a sentinel into the type system while still conveying why the result is empty.

ArgumentParser subclass enforcing the EX_USAGE=64 contract. Codex round 4 P3 closure: stock argparse calls sys.exit(2) on any parser-level fa

The shared module exposes load_passport + dump_passport as the public API. Both migration tools import from this module.

#138 risk 2+3: when one resolver raises its Unavailable exception inside the thread pool, that exception must surface back on the orchestrator thr

Shared helpers: write base+patch to a temp dir and run the apply.

Regression pins for the historical Bash fail-open shapes + the deep-path crash. Review surfaced a long list of Bash bypasses (quoted redirection,

build_signals_object grows an optional arxiv_client keyword arg; when omitted, behavior is byte-equivalent to the v3.7.3 caller (no arxiv field).

Codex R1-1 closure: CLI was unrunnable because NotImplementedError fired before reading the passport. Verify the production wiring path now ac

The table must reference 16 canonical disclosure fields per anchor and 4 canonical anchor slugs, matching the discovery doc §4.2 field list and

De-dup guard: Nature anchor verbatim quotes and the v3.2 venue policies file both cross-reference the canonical shared/policy_data/nature_poli

Codex R1 (Phase 6.7 review) closures: 3 P2 findings against the initial INV-1/INV-2/INV-3 implementation. Each test re-introduces the bypass c

Codex R2 (Phase 6.7 review, after R1 fixes) closures: 2 P2 findings against the bullet-text exactness contract and INV-2's cross-bullet `.*` o

Codex R3 (Phase 6.7 review, after R2 fixes) closure: 1 P2 finding restoring INV-2 coverage of intro-paragraph prose, not just bullets.

Codex R4 (Phase 6.7 review, after R3 fixes) closure: 1 P2 finding restoring INV-2 coverage of post-bullet prose.

Codex R5 (Phase 6.7 review, after R4 fixes) closure: 1 P2 finding — C3 regex was not whitespace-tolerant inside sentences, causing CI to fail

Codex R6 (Phase 6.7 review, after R5 fixes) closure: 1 P2 finding — INV-1 only counted exact canonical matches and ignored weakened near-dupli

Codex R7 → R9 architectural rewind: R7 originally extended INV-3 with `_is_clause_1_like` to catch weakened variants outside the manifest. R9

Codex R8 (Phase 6.7 review, after R7 fixes) closures: 2 P2 findings — `_is_clause_1_like` was over-broad (rejected legitimate anti-fabrication

Codex R9 (Phase 6.7 review, after R8 fixes) architectural rewind: R7+R8 had over-extended INV-3 with the Clause 1-like heuristic (false-positi

Lock the ruamel.yaml configuration that every passport round-trip has assumed since v3.6.4.

Lock the magic numbers — these are protocol-level invariants, not arbitrary tuning.

The deny output JSON shape (spec §3.2 first-party-verified).

Per spec §3.2 emission rules: emit object with both fields false when computed-and-clean; emit partial object when one signal can't be compute

Codex round-1 [P2]: a `resume_from_passport=<hash>` session has an empty `state_tracker.stages` (reconstructed from ledger only); recomputing